Independent Case Management

The covered entity (CE), Independent Case Management, reported that it experienced a ransomware incident that affected the protected health information (PHI) of 3,307 individuals. The PHI involved included names, addresses, dates of birth, drivers’ license and Social Security numbers, financial and claims information, lab results, diagnoses, medications, and other treatment information. The CE notified HHS, the affected individuals, and the media. In response to the breach, the CE implemented additional administrative, technical, and security safeguards to better protect its PHI.